Data Privacy Policy - Cubic Consulting

Privacy Policy:

Your Privacy, Our Priority

DATA CONTROLLER

Your personal data is collected and processed by Cubic Consulting SARL, hereinafter referred to as “CUBIC CONSULTING”.

CUBIC CONSULTING specializes in cybersecurity consulting, services, and operations. CUBIC CONSULTING complies with applicable European and national privacy and data protection legislation, such as the General Data Protection Regulation (GDPR), as well as protection against cyber attacks and other possible data breaches. CUBIC CONSULTING’s registered office is located at 100 rue de la Gare in Leudelange, Luxembourg and the company’s RCS registration number is: LU B254654.

SCOPE OF THE PRIVACY STATEMENT

CUBIC CONSULTING attaches great importance to confidentiality and is therefore committed to protecting the (personal) data of all its stakeholders with the utmost care and to processing personal data only in a fair and lawful manner. This Privacy Statement applies to our customers, partners, and website visitors for personal data collected and processed by CUBIC CONSULTING via this website and related services.

This Privacy Statement contains essential information on how CUBIC CONSULTING, as data controller, collects and processes personal data, and for what purposes. It also explains your rights as a data subject.

PERSONAL DATA PROCESSING

Personal data can be defined as any information that directly or indirectly identifies a natural person. You may provide us with your personal data for the following activities, for the corresponding purposes and on the basis of the reasons indicated:

Contact form or correspondence:

By completing the contact form on the website, you consent to CUBIC CONSULTING processing your name, e-mail address, company name, audio/video message and your question or message. If you contact us directly (by e-mail, telephone, or post), we will process your contact details and the content of this correspondence. We only use this information to better process your question or message.

We process this data exclusively within the framework of any contract that binds us, is likely to bind us or in the legitimate interests of CUBIC CONSULTING. We keep this data for as long as is strictly necessary for the contract or as long as it is in the legitimate interest of CUBIC CONSULTING. This personal data is not passed on to third parties.

Newsletter:

If you subscribe to our newsletter, you provide us with your name and e-mail address. Its purpose is to send you relevant information about our products and services and to keep you up to date with our news. CUBIC CONSULTING collects this data on the basis of your consent. We use an external service provider (Mailchimp) to monitor the delivery of our newsletter.

In addition, our newsletter contains so-called “tracking pixels”. A tracking is a miniature image used for statistical analysis of the effectiveness of a marketing marketing campaign, to check, for example, whether the newsletter e-mail has been opened. The personal data collected via these pixels is stored and analyzed in order to optimize the form and content of the newsletter, and thus, better tailor its content to your your interests in future issues. We retain this data for as long as you have not withdrawn your consent and ask you to renew your consent every three years, failing which your personal data will be destroyed. Your personal data will not be passed on to third parties.

Commercial and marketing purposes:
CUBIC CONSULTING may use your name and contact details for direct marketing campaigns, to inform you of promotions on products and services provided by CUBIC CONSULTING and to contact potential future customers. We may also use the data to better target offers, for example by e-mail, or to display advertising on our own website. We send these communications or place the advertisements in the legitimate interests of CUBIC CONSULTING if we see an interest in our services or products, whether you are a prospect or already a customer. We keep this data for as long as you have not withdrawn your consent, and we ask you to renew your consent every 3 years, failing which your personal data will be destroyed.

Comments for news and blog posts:
We value your opinion on our posts. When you leave a comment on our website, we require you to provide your name and email address. This information is used solely for the purpose of displaying your name alongside your comment and for moderation purposes. We may also use your email address to contact you directly in relation to your comment if necessary. By posting a comment on our website, you consent to the collection, use, and storage of your personal data as outlined in this policy. If you do not agree to these terms, please refrain from posting comments.

Community and social networks:
CUBIC CONSULTING is present on social networks, personal data collected within the framework of the use of the social networks in particular at the time of their contribution to the Community can be the subject of processing by CUBIC CONSULTING which has a legitimate interest to use them at ends of marketing and improvement of its advertising supports as well as its image on the basis of voluntary information transmitted or published by the Concerned Persons. (XX)

Survey/satisfaction questionnaire:
With your consent, we may use your contact details to evaluate, qualify, and improve the services we offer you. To this end, we may send out questionnaires, and customer surveys or ask you to fill in our satisfaction form to gather your feedback. We keep this data for as long as you have not withdrawn your consent, and we ask you to renew your consent every 3 years, failing which your personal data will be destroyed or made anonymous.

Events:
When you register for one of our events, we ask you to provide certain information to participate in that particular event. For example, we will usually ask for your name, e-mail address, company name, and job title. We collect this information on the basis of your consent in order to complete your registration and ensure the best event experience for everyone. We retain this data for as long as you have not withdrawn your consent and ask you to renew your consent every three years, failing which your personal data will be destroyed or made anonymous.

Job application:
By completing the job application form on the website, you consent to CUBIC CONSULTING processing your name, e-mail address, CV, and cover letter in connection with your job application. If you contact us directly or interact with us regarding a job application (by e-mail, telephone, post, or social networks such as LinkedIn), we will process your contact details and the content of this correspondence. We retain this data for as long as you have not withdrawn your consent and ask you to renew your consent every 2 years, failing which your personal data will be destroyed. We use this information only to finalize your recruitment process. The data required for the employment contract will be retained from the date of your engagement.

Provision of our products and services:
When you purchase certain products or services from CUBIC CONSULTING, we collect your contact and billing information. We do this in order to provide our services and manage our (customer) relationship, in accordance with your purchase contract with CUBIC CONSULTING. We keep this data for 10 years from the end of the contractual relationship.

CUBIC CONSULTING is present on various social networks and acts as a co-processor with them for certain processing operations, in particular when the logo of the social network used appears on the CUBIC CONSULTING website.

For further information on the processing of personal data on various social networks, Data Subjects may consult the following information notices:

LinkedIn: privacy policy
Twitter : https://twitter.com/privacy
Youtube : https://policies.google.com/privacy
Instagram: https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_
Facebook : https://www.facebook.com/privacy/policy/?entry_point=comet_dropdown

We will keep the data collected indirectly from the various social networks for 3 years, after which the data will be destroyed or, if necessary, anonymized.

Other social networks may also be added at any time by CUBIC CONSULTING, and this will be the subject of a new version of this policy.

CUBIC CONSULTING treats your personal data confidentially and undertakes to process it only in a manner compatible with the purposes for which the data was originally collected. No data will be reused for a purpose other than that for which the data was collected.

YOUR RIGHTS AS A DATA SUBJECT

At any time, the data subject may exercise his or her rights as described in the General Data Protection Regulation. The data subject may exercise the following rights:

RIGHT OF ACCESS
You have the right, at any time, to access your personal data free of charge and to request a copy of the personal data that CUBIC CONSULTING collects about you.

RIGHT OF RECTIFICATION
You always have the right to have incorrect personal data corrected or incomplete personal data completed.

RIGHT TO OBLIVION
You may request the deletion of your personal data from CUBIC CONSULTING’s systems.
A request for the deletion of your personal data may not be granted due to contractual or legal obligations. CUBIC CONSULTING will take these obligations into account when granting your request.

RIGHT OF OBJECTION
You have the right to object to the processing of your personal data if the processing is carried out on the basis of CUBIC CONSULTING’s legitimate interests. We will cease processing unless there are compelling, legitimate grounds for doing so or for the exercise of legal rights.

RIGHT TO WITHDRAW CONSENT
You may withdraw your consent for CUBIC CONSULTING to process your personal data at any time. For example, you can always unsubscribe from newsletters. However, the withdrawal of your consent does not apply to processing previously carried out by CUBIC CONSULTING.

RIGHT TO RESTRICT PROCESSING
In certain cases, the data subject has the right to obtain the restriction of the processing of his/her personal data. We will continue to store your data but wil not process the data. You may, for example, submit this request when you believe that your personal data is inaccurate or that the processing by CUBIC CONSULTING is unjustified. We only have to comply with such requests in specific cases as defined by law.

RIGHT TO DATA PORTABILITY
The data subject has the right to receive personal data processed by CUBIC CONSULTING in a structured, commonly used, and machine-readable format and/or to transmit such data to another controller.

These rights may be exercised free of charge by sending an e-mail to privacy@cubic.consulting. We undertake to respond to your request within one month of receipt. We may first ask for additional information to confirm your identity and to ensure that the request really comes from you.

DISCLOSURE TO THIRD PARTIES

CUBIC CONSULTING will refrain from selling and disclosing the personal data of data subjects to third parties and from making them public, except in the following specific cases:

Personal data may be shared with third-party service providers to whom CUBIC CONSULTING has entrusted certain processing activities. In all cases, they are required to process your personal data in accordance with our instructions and, if necessary, a data processing agreement will be concluded to ensure compliance with all obligations required by applicable data protection legislation.
If required by current legislation or regulations.

With regard to international transfers of personal data and processing outside the European Economic Area (EEA), your data is only transferred to parties located in third countries, such as software providers and cloud or courier services, where permitted by applicable data protection legislation. We provide appropriate safeguards to ensure that your rights are respected by the data recipient outside the EEA in accordance with an adequate level of data protection.

STORAGE OF YOUR PERSONAL DATA

We guarantee to provide only limited access to archived data and to delete or anonymize your personal data if the retention period is exceeded.

SECURITY AND CONFIDENTIALITY OF YOUR PERSONAL DATA

CUBIC CONSULTING has taken technical and organizational security measures to prevent the destruction, loss, falsification, alteration, unauthorized access or disclosure of your personal data to third parties and any other unauthorized processing of such data.

We have made every effort to ensure the confidentiality, integrity and availability of our information systems and personal data processing services. These measures include physical and operational security, access control, awareness-raising and confidentiality clauses. All our employees, as well as any third parties we engage, are required to respect the confidentiality and security of your data.

CONTACT

If you have any comments, questions or concerns about any of the information contained in this statement, or any other issues relating to CUBIC CONSULTING’s processing of your personal data, please contact privacy@cubic.consulting.

If you prefer to contact us by post, please write to us at the following address:

100 rue de la Gare, 3355 Leudelange, Luxembourg.

You can also contact the Data Protection Authority in Luxembourg – CNPD:

15, Boulevard du Jazz

4370 BELVAUX

CHANGES TO OUR PRIVACY STATEMENT

We may modify or update this privacy statement from time to time to reflect changes in our practices relating to the processing of your personal data or changes dictated by applicable law. We will do so by posting the updated version on this CUBIC CONSULTING website. When we publish our amended Privacy Statement, we will change the date and version number of its “last update”. Major changes will be posted on our home page. Nevertheless, we encourage you to periodically review our Privacy Statement.

ABOUT CUBIC CONSULTING

Cubic Consulting is a Luxembourg-based cybersecurity company. We bring to companies of all sizes our years of expertise and field experience acquired in every corner of the globe.